For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Mar 04, 2014

So I just paste this then into the Definition of the iRule???:

VS:

when CLIENT_ACCEPTED { if { !(([TCP::client_port] > 1570 and [TCP::client_port] < 1575) or ([TCP::client_port] > 2500 and [TCP::client_port] < 3500)) }{ drop } }

/Patrik

  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Mar 04, 2014
    Yep, and assign it to the virtual server. /Patrik
  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Mar 04, 2014
    One more thing. If you want to keep the port in question intact when the F5 sends the packet on to the members you might want to untick the port translation option in the VS config.